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^ I Abstract 

' While Quantum phase estimation (QPE) is at the core of many quantum algorithms 

known to date, its physical implementation (algorithms based on quantum Fourier 
(— I i transform (QFT) ) is highly constrained by the requirement of high-precision controlled 

Qh| phase shift operators, which remain difficult to realize. In this paper, we introduce 

an alternative approach to approximately implement QPE with arbitrary constant- 
precision controlled phase shift operators. 
^ I The new quantum algorithm bridges the gap between QPE algorithms based on 

QFT and Kitaev's original approach. For approximating the eigenphase precise to the 
nth bit, Kitaev's original approach does not require any controlled phase shift operator. 
I In contrast, QPE algorithms based on QFT or approximate QFT require controlled 

' phase shift operators with precision of at least Pi/2n. The new approach fills the gap 

CN . and requires only arbitrary constant-precision controlled phase shift operators. From a 

physical implementation viewpoint, the new algorithm outperforms Kitaev's approach. 



1 Introduction 



Quantum Phase Estimation (QPE) plays a core role in many quantum algorithms [H HOI El 
^ [ [131 El- Some interesting algebraic and theoretic problems can be addressed by QPE, such 
5h I as prime factorization [10], discrete- log finding pT], and order finding. 

Problem. [Phase Estimation] Let U be a unitary matrix with eigenvalue e^'^*'^ and cor- 
responding eigenvector \u) . Assume only a single copy of \u) is available, the goal is to find 
if such that 

Pr(|^-V,|<l)>l-c, (1) 
where c is a constant less than ^. 
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In this paper we investigate a more general approach for the QPE algorithm. This ap- 
proach completes the transition from Kitaev's original approach that requires no controlled 
phase shift operators, to QPE with approximate quantum Fourier transform (AQFT). The 
standard QPE algorithm utilizes the complete version of the inverse QFT. The disadvan- 
tage of the standard phase estimation algorithm is the high degree of phase shift operators 
required. Since implementing exponentially small phase shift operators is costly or physi- 
cally not feasible, we need an alternative way to use lower precision operators. This was 
the motivation for AQFT being introduced — for lowering the cost of implementation while 
preserving high success probability. 

In AQFT the number of required phase shift operators drops significantly with the cost 
of lower success probability. Such compromise demands repeating the process extra times 
to achieve the final result. The QPE algorithm has a success probability of at least ^ [6J. 
Phase estimation using AQFT instead, with phase shift operators up to degree m where 
m > log2(r;,) + 2, has success probability at least — ^ IB 

On the other hand, Kitaev's original approach requires only the first phase shift operator 
(as a single qubit gate not controlled). Comparing the existing methods, there is a gap 
between Kitaev's original approach and QPE with AQFT in terms of the degree of phase 
shift operators needed. In this paper our goal is to fill this gap and introduce a more general 
phase estimation algorithm such that it is possible to realize a phase estimation algorithm 
with any degree of phase shift operators in hand. In physical implementation of the phase 
estimation algorithm, the depth of the circuit should be small to avoid decoherence. Also, 
higher degree phase shift operators are costly to implement and in many cases it is not 
physically feasible. 

In this paper, we assume only one copy of the eigenvector \u) is available. This implies a 
restriction on the use of controUed-f/ gates that all controlled-f/ gates should be applied on 
one register. Thus, the entire process is a single circuit that can not be divided into parallel 
processes. Due to results by Griffiths and Niu, who introduced semi classical quantum 
Fourier transform [3j, quantum circuits implementing different approaches discussed in this 
paper would require the same number of qubits. 

The structure of this paper is organized as follows. In Sec. |2] we give a brief overview 
on existing approaches, such as Kitaev's original algorithm and standard phase estimation 
algorithm based on QFT and AQFT. In Sec. [3]we introduce our new approach and discuss the 
requirements to achieve the same performance output (success probability) as the methods 
above. Finally, we make our conclusion and compare with other methods. 

2 Quantum phase estimation algorithms 
2.1 Kitaev's original approach 

Kitaev's original approach is one of the first quantum algorithms for estimating the phase 
of a unitary matrix [8j. Let f/ be a unitary matrix with eigenvalue e'^'^^'^ and corresponding 
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Figure 1: Hadamard test with extra phase shift operator. 



eigenvector \u) such that 

U \u) = e^^'^ \u) . (2) 

In this approach, a series of Hadamard tests are performed. In each test the phase 2^~^ip 
{1 < k < n) will be computed up to precision 1/16. Assume an n-bit approximation is 
desired. Starting from k = n, in each step the kth bit position is determined consistently 
from the results of previous steps. 

For the kth bit position, we perform the Hadamard test depicted in Figure [T], where the 
gate K = I2. Denote cpk = 2^~^(p, the probability of the post measurement state is 

Pr(0|A;) = i±^^^^, Pr(l|fc)= ^-^°f"^^^ (3) 

In order to recover ip^^, we obtain more precise estimates with higher probabilities by iterating 
the process. But, this does not allow us to distinguish between cp^ and —^Pk- This can be 
solved by the same Hadamard test in Figure [H but instead we use the gate 

The probabilities of the post-measurement states based on the modified Hadamard test 
become 

Fr{0\k)= '~''f''^'\ Frm='-^^^f^. (5) 

Hence, we have enough information to recover ip^ from the estimates of the probabilities. 

In Kitaev's original approach, after performing the Hadamard tests, some classical post 
processing is also necessary. Suppose ip = O.X1X2 ■ ■ - Xn is an exact n-bit. If we are able to 
determine the values of (p, 2(p, . . . , 2"'~^(p with some constant-precision (1/16 to be exact), 
then we can determine ip with precision 1/2" efficiently [71 [8] . 

Starting with ipn we increase the precision of the estimated fraction as we proceed toward 
(pi. The approximated values of (pk {k = n, . . . ,1) will allow us to make the right choices. 

For k = 1, . . . ,n the value of ipk is replaced by where Pk is the closest number chosen 
from the set {§, |, |, |, |, |, |, |} such that 

\fk — /3fe|mod 1 < o- (6) 
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The result follows by a simple iteration. Let /3„ = O.XnXn+iXn+2 and proceed by the 
following iteration: 



^fO if O.OXfc+lXfc+2 - /3fc|mod 1 < 1/4 

~ \ 1 if O.lXfc+iXfe+2 - /3fc|mod 1 < 1/4 ^ ^ 

for A; = n — 1, . . . , 1. By using simple induction, the result satisfies the following inequality: 

|0.XiX2...X„+2 - ¥^ I mod 1 < 2" ("+^) . (8) 

In Eq. El we do not have the exact value of ipk- So, we have to estimate this value and 
use the estimate to find Pk- Let <^ be the estimated value and 

e = - V'fclmod 1 (9) 

be the estimation error. Now we use the estimate to find the closest Pk- Since we know the 
exact binary representation of the estimate we can choose (3k such that 

1^ - /3fc|mod 1 < —■ (10) 

lo 

By the triangle inequality we have, 

Wk — /3fc|mod 1 < IV^fc — V^fclmod 1 + Iv^fe " /3fc|mod 1 < £ + — • (H) 

lo 

To satisfy Eq. |6l we need to have e < 1/16, which implies 

l~ I 1 / N 

IV^fc - V^fclmod 1 < — • (12) 

lo 

Therefore, it is required for the phase to be estimated with precision 1/16 at each stage. 

In the first Hadamard test (Eq. [3]), in order to estimate Pr(l|/c) an iteration of Hadamard 
tests should be applied to obtain the required precision of 1/16 for ipk- This is done by 
counting the number of states |1) in the post measurement state and dividing that number 
by the total number of iterations performed. 

The Hadamard test outputs |0) or |1) with a fixed probability. We can model an iteration 
of Hadamard tests as Bernoulli trials with success probability (obtaining |1)) being p^. The 
best estimate for the probability of obtaining the post measurement state |1) with t samples 
is 

~ h 

Pk = -, (13) 

where h is the number of ones in t trials. This can be proved by Maximum Likelihood 
Estimation (MLE) methods j^. 

In order to find sin(27r(y9fc) and cos{2TTipk), "we can use estimates of probabilities in Eq. [3] 
and EQ. [5l Let Sk be the estimate of sm{2nipk) and tk the estimate of cos(27rv9fc). It is clear 
that if 

\Pk-Pk\ < eo, (14) 
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then 



\sk - sm(27npk)\ < 2eo, \tk - cos(27rv9fe)| < 2eo. 



(15) 



Since the inverse tangent function is more robust to error than the inverse sine or cosine 



functions, we use 



27r 



■ arctan 



as the estimation of ipk- By Eq. [12] we should have 



(fii. arctan 

^ 27r 



< 



mod 1 



16' 



(16) 



(17) 



The inverse tangent function can not distinguish between the two values (pk and v9fc±l/2. 
However, because we find estimates of the sine and cosine functions as well, it is easy to 
determine the correct value. The inverse tangent function is most susceptible to error when 
ipk is in the neighborhood of zero and the reason is that the derivative is maximized at zero. 
Thus, if 

\sk - sm(27npk)\ = ei and \tk - cos{27iipk)\ = €2, (18) 
considering the case where (pk = 0, then we have 



1 

2^ 



arctan 



lies 



< 



1 

16' 



By simplifying the above inequality, we have 

ei 



< tani 



(19) 



(20) 



lies 

With the following upper bounds for ei and 62, the inequality above is always satisfied when 

1 , , , . 1 



< 1 ^ and leol < 1 ^. 

V2 V2 



(21) 



Therefore, in order to estimate the phase ipk with precision 1/16, the probabilities in 
Eq. [3] and Eq. [5] should be estimated with error at most (2 — a/2)/4 which is approximately 
0.1464. In other words, it is necessary to find the estimate of Pr(l|A;) such that 



Pr(l|A:)-^ 



< 



V2 



4 



0.1464. 



(22) 



There are different ways we can guarantee an error bound with constant probability. 
The first method, used in [8], is based on the Chernoff bound. Let Xi, . . . , Xm be Bernoulli 
random variables, by Chernoff 's bound we have 



Pr 



^ m 

m ^-^ 

i=0 



Pk 



> 6] <2e 



(23) 
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where in our case the estimate is pk = ^ Yl^o-^i- Since we need an accuracy up to 0.1464, 
we get 

Pr {\pk -Pk\> 0.1464) < 2e-(°-°^^^)". (24) 



In order to obtain 



Prdpfc-Pfcl < 0.1464) > 1-|, (25) 



a minimum of mi trials is sufficient when 

, 4 

mi ^ 24 m - 

e 

^ 33 + 24 In- (26) 

€ 

This is the number of trials for each Hadamard test, as we have two Hadamard tests at 
each stage. Therefore, in order to have 

Pr (^\^k-Vk\ < >l-e. (27) 

we require a minimum of 

m = 2mi 

4 

^ 471n- 

e 

66 + 47 In ^ (28) 

many trials. 

In the analysis above, we used the Chernoff bound, which is not a tight bound. If we want 
to obtain the result with a high probability, we need to apply a large number of Hadamard 
tests. In this case, we can use an alternative method to analyze the process by employing 
methods of statistics [T^ . 

Iterations of Hadamard tests have a Binomial distribution which can be approximated 
by a normal distribution. This is a good approximation when p is close to 1/2 or mp > 10 
and m{l — p) > 10, where m is the number of iterations and p the success probability. In 
other words, if we see 10 successes and 10 fails in our process, we can use this approximation 
to obtain a better bound. 

In Kitaev's algorithm each Hadamard test has to be repeated a sufficient number of 
times to achieve the required accuracy with high probability. Because only one copy of \u) 
is available, all controlled-f/ gates have to be applied to one register. Therefore, all the 
Hadamard tests have to be performed in sequence, instead of parallel, during one run of the 
circuit. A good example for this case is the order finding algorithm. We refer the reader to 
[H] for more details. 

In Kitaev's approach, there are n different Hadamard tests that should be performed. 
Thus, if the probability of error in each Hadamard test is Eq, by applying the union bound. 
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Figure 2: Standard Quantum Phase Estimation. 



the error probabihty of the entire process is e = neo. Therefore, in order to obtain 

Pr(|^-^|<l)>l-5, (29) 

for approximating each bit we need m trials where 

4n 

m = 471n— . (30) 

e 

Since, all of these trials have to be done in one circuit, the circuit consists of mn Hadamard 
tests. Therefore the circuit involves mn controUed-f/ operations. As a result, if a constant 
success probability is desired, the depth of the circuit will be 0{nlogn). 

2.2 Approach based on QFT 

One of the standard methods to approximate the phase of a unitary matrix is QPE based on 
QFT. The structure of this method is depicted at Figure O The QPE algorithm requires two 
registers and contains two stages. If an n-bit approximation of the phase ip is desired, then the 
first register is prepared as a composition of n qubits initiahzed in the state |0). The second 
register is initially prepared in the state \u). The first stage prepares a uniform superposition 
over all possible states and then applies controlled-t/ operations. Consequently, the state 
will become 

(31) 

k=0 

The second stage in the QPE algorithm is the QFT^ operation. 

There are different ways to interpret the inverse Fourier transform. In the QPE algorithm, 
the post-measurement state of each qubit in the first register represents a bit in the final 
approximated binary fraction of the phase. Therefore, we can consider computing each bit 
as a step. The inverse Fourier transform can be interpreted such that at each step (starting 
from the least significant bit), using the information from previous steps, it transforms the 
state 

+ e'-^'^ni)) (32) 
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Figure 3: 3-qubit inverse QFT where l<i<3, |2/i) = :^(|0) + e' 



27ri(0.Xi...X3) 



to get closer to one of the states 



i=(|0) + e™|l)) = ^(|0) + |1)) 



or 



-^(|0) + e™|l)) = -^(|0)-|1)). 



(33) 



Assume we are at step k in the first stage. By applying controlled- 1/^*" operators due to 
phase kick back, we obtain the state 

|0^ _|_ g27riO.Xfe+ia;fc+2...x„ |]^^ 



V2 



(34) 



Shown in Figure [3], each step (dashed-line box) uses the result of previous steps, where 
phase shift operators are defined as 



Rk = 



1 

62-^2*^ 



(35) 



for 2 < k < n. 

By using the previously determined bits Xk+2, ■ ■ ■ ,Xn and the action of corresponding 
controlled phase shift operators (as depicted in Figure [3]) the state in Eq. |34] becomes 

|0) + e2-^o-*+iO-o |1) |0) + (-1)-^-+! |1) 

7=2 = 7=2 • ^''^ 

Thus, by applying a Hadamard gate to the state above we obtain \xk+i)- Therefore, we can 
consider the inverse Fourier transform as a series of Hadamard tests. 

If if has an exact ra-bit binary representation the success probability at each step is 1. 
While, in the case that ip cannot be exactly expressed in n-bit binary fraction, the success 
probability P of the post-measurement state, at step k, is 

P = cos2(7r^^) for 1^1 < ^ (37) 

Detailed analysis obtaining similar probabilities are given in Sec. El 

Therefore, the success probability increases as we proceed. The following theorem gives 
us the success probability of the QFT algorithm. 
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Figure 4: Quantum circuit for AQFT. 



\yi) 
\y2) 

\yn-i) 



H- \yn) 



Theorem 1 ([6j). // ^ < < then the phase estimation algorithm returns one of x 
or X + 1 with probability at least \. 



2.3 Approach based on AQFT 

AQFT was first introduced by Barenco, et al pj. It has the advantage in algorithms that 
involve periodicity estimation. Its structure is similar to regular QFT but differs by elimi- 
nating higher precision phase shift operators. The circuit of AQFT is shown in Figure HI At 
the RHS of the circuit, for n — m < i < n 



) = ^(|0) + e2"*(°-"-"") |1)) (3^ 



V2 



and for 1 < -j < n — m, 

= ^(|0) + e2-^(o---»+— i) |i)). (39) 

Let Q.X1X2 . . . x„ be the binary representation of eigenphase ip. For estimating each Xp, 
where 1 < p < n, AQFT^ requires at most m phase shift operations. Here m is defined as 
the degree of the AQFT„. 

Therefore, phase shift operations in AQFT^ requires precision up to e^'^*/^™. The prob- 
ability P of gaining an accurate output using AQFT^, when m > loggn + 2, is at least [1] 

P > ^(sin^(P)). (40) 
TT^ An 

The accuracy of AQFT^ approaches the lower bound for the accuracy of the full QFT, 
which is A better lower bound is also achieved by Cheung in [2] 

P > ^ - (41) 
4n 

Moreover, this indicates the logarithmic-depth AQFT provides an alternative approach 
to replace the regular QFT in many quantum algorithms. The total number of the phase 
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Figure 5: QPE with only two controlled phase shift operations. 



shift operator invocations in AQFTm is 0(n log2 n), instead of 0{n'^) in the QFT. The phase 
shift operator precision requirement is only up to e^'^*/^", instead of e^'^*/^". 

By using the AQFT instead of the QFT we trade off smaller success probability with 
smaller degrees of phase shift operators and a shorter circuit. 



3 New approach with constant degree phase shift op- 
erators 

In this section we introduce our new approach for QPE. Our approach draws a trade-off 
between the highest degree of phase shift operators being used and the depth of the circuit. 
As a result, when smaller degrees of phase shift operators are used, the depth of the circuit 
increases and vice versa. 

As pointed out in Sec. \2.2\ by using information of previous qubits, the full-fledged inverse 
QFT transforms the phase such that the phase of the corresponding qubit gets closer to one 
of the states |+) or |— ). For our approach, we first consider the case where only the controlled 
phase shifts operators R2 and are used (Eq. In this case, we only use the information 
of the two previous qubits (see Figure E]). In such a setting, we show that it is possible to 
perform the QPE algorithm with arbitrary success probability. 

The first stage of our algorithm is similar to the first stage of QPE based on QFT. Assume 
the phase is = O.Xia;2a;3 . . . with an infinite binary representation. At step fc, the phase 
after the action of the controlled gate U"^ is 2^ip = O.Xk+iXk+2 ■ ■ ■ and the corresponding 
state is 

lV'.) = ^(|0) + e2-2'=^|l)). (42) 

By applying controlled phase shift operators R2 (controlled by the {k — l)th qubit) and 
i?3 (controlled by the [k — 2)th qubit) to the state above, we obtain 

= 4^(10) + e^-^ll)), (43) 
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where 

It is easy to see that 

Hence, we can express 



where \d\ < |. Therefore, the state 



= 0.a;fc+i00xfc+4 .... 

1 



\ip - O.Xfc+i| < 



8' 



ip = O.Xk+i + 6 
'ipk ) can be rewritten as 



(|0) + e2"'(°-"'=+i+^) |1)). 

V2 



(44) 
(45) 
(46) 

(47) 



In order to approximate the phase (f at this stage (A;th step), we need to find the value 
of Xfc+i by measuring the kth qubit. In this regard, we first apply a Hadamard gate before 

the measurement to the state ipkj. The post-measurement state will determine the value 

of Xk+i correctly with high probability. The post measurement probabilities of achieving |0) 

or |1) in the case where Xk+i = is 



Pr(0|A;) 
Pr(l|fc) 



cos vrt 



sin^fvr^ 



(48) 



Therefore, 



Pr(0|A;) > cos^(- 



0.85 



Pr(l|A;) < sin^(-)^0.15 



(49) 



In the case where Xk+i = 1, the success probability is similar. 

By iterating this process a sufficient number of times and then letting the majority decide, 
we can achieve any desired accuracy. The analysis is similar to Sec. 12.11 In this case, all we 
require is to find the majority. Therefore, by a simple application of the Chernoff's bound 



(50) 



where in this case p = cos^(7r/8). It is easy to see that if a success probability of 1 — e is 
required, then we need at least 

m = 41n(^) (51) 

many trials for approximating each bit. 

By comparing Eq. |30] and Eq. [51] (Table [1]), we see that while preserving the success 
probability, our new algorithm differs by a constant and scales about 12 times better than 
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Figure 6: Required trails for estimating each bit in Kitaev's original approach and our new 
approach. 



Kitaev's original approach in terms of the number of Hadamard tests required (Figure [6]). In 
physical implementations this is very important, especially in the case where only one copy 
of the eigenvector \u) is available and all Hadamard tests should be performed during one 
run of the circuit. 

In the algorithm introduced above, only phase shift operators R2 and -R3 are used. 
When higher phase shift operators are used in our algorithm, the success probability of 
each Hadamard test will increase. As a result, fewer trials are required in order to achieve 
similar success probabilities. As pointed out in Sec. 12. 3[ the QPE based on AQFT requires 
phase shift operators of degree at least 2 + log n. With this precision of phase shift operators 
in hand, the success probability at each step would be high enough such that there is no 
need to iterate each step. In such scenario, one trial is sufficient to achieve an overall success 
probability of a constant. 



Success 


Kitaev's 


Constant 


Probability 


Original Approach 


Precision 


0.50000 


98 


3 


0.68269 


120 


5 


0.95450 


211 


13 


0.99730 


344 


24 


0.99993 


515 


39 



Table 1: Required trials for estimating each bit by using Chernoff's bound. 



Recall the phase estimation problem stated in the introduction. If a constant success 
probability greater than | is required, the depth of the circuit for all the methods men- 
tioned in this paper (except the QPE based on full fledged QFT, which is 0(n^)), would be 
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O(nlogn) (assuming the cost of implementing the controlled- C/^ gates are all the same). 
This means the depth of the circuits differ only by a constant. However, the disadvantage 
of Kitaev's original approach to our new approach is the large number of Hadamard tests 
required for each bit in the approximated fraction. 

Therefore, the new method introduced in this paper provides the flexibility of using any 
available degree of controlled phase shift operators while preserving the success probability 
and the length of the circuit up to a constant. 
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